Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
File: 74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa (raw, json)
Hash identifier: 0TqL1tgdzJ2D2phWiSDZ5nKaeVbBNxe37hY85CaJp1g=
Subject key identifier: B9:AC:DC:40:8E:5B:57:70:C0:10:3D:73:E1:BE:EF:97:74:C0:60:D0
Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial: 010D0C9F432858493C092A9C43C10B2F6F9AEB80
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 53904
IP address blocks: 162.244.229.0/24 maxlen: 24
205.189.33.0/24 maxlen: 24
2001:410:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2a:9c:43:c1:0b:2f:6f:9a:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=4c2fc961-4bbd-4829-9cda-c687cd31e206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:d6:20:b2:24:6d:72:90:db:46:02:cd:a3:
2e:14:0f:e8:44:41:b9:0a:77:d5:ec:f3:3b:0e:b9:
ea:52:17:84:a1:22:e8:1e:2c:35:58:aa:00:d0:b7:
bc:78:c8:99:b6:44:14:79:91:de:7f:df:73:6b:98:
d0:39:b5:3a:00:7d:72:51:65:a6:51:5d:da:f7:0c:
3a:63:97:85:53:9d:0b:14:d7:75:82:ab:20:32:11:
96:af:c1:a8:0b:d9:4b:34:1e:90:e8:45:d3:c7:1b:
d4:40:91:aa:f6:bd:f2:14:08:d7:4e:d9:d6:d2:23:
f0:7d:78:98:0b:5d:47:9c:09:29:66:33:2b:9b:6b:
fa:3e:6e:4a:f1:38:82:e7:c2:34:2a:8e:a8:3a:28:
71:4f:93:fc:fd:ec:b1:3f:e9:01:2b:f7:c0:d9:89:
fe:ce:e5:af:ab:8a:d3:d4:a8:fc:24:3a:bf:72:ce:
e4:e3:86:2c:76:2d:0e:ff:46:13:fc:b4:d0:b5:f3:
61:ea:6d:52:cd:72:2c:a1:b9:76:f8:61:05:a7:fa:
65:60:91:20:fe:34:bd:a1:7b:7a:c0:ca:28:a2:ab:
d1:7f:ba:48:c5:25:12:b6:dc:e6:c1:37:76:5b:d1:
8a:67:73:45:23:75:4c:93:c6:6a:2d:14:3a:75:19:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:DC:40:8E:5B:57:70:C0:10:3D:73:E1:BE:EF:97:74:C0:60:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
X509v3 Authority Key Identifier:
keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
sbgp-ipAddrBlock: critical
IPv4:
162.244.229.0/24
205.189.33.0/24
IPv6:
2001:410:102::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:81:41:d5:ae:9b:e4:dd:e1:d4:74:fb:b8:30:b0:43:ab:19:
0e:61:40:b8:ad:50:1c:87:3e:d5:b3:46:8f:ab:b2:00:7c:3e:
1c:a8:33:ba:1d:6d:22:3f:5d:65:b4:19:57:bb:d6:49:c2:92:
0d:6c:92:bd:72:30:1b:26:b3:e0:6a:5c:d0:56:5e:ec:21:af:
06:9a:97:b3:15:c5:79:38:9f:f9:37:63:13:ef:a9:b2:2f:57:
01:00:e7:d8:3b:9a:29:e8:4d:19:a4:8d:b7:67:61:ae:da:ac:
ae:9d:ad:3f:2f:26:02:5a:21:59:14:03:61:32:2d:20:f2:bb:
cf:91:68:ae:d7:45:99:78:36:ba:c2:a8:58:36:bb:90:74:7b:
76:c9:77:5c:d3:68:71:73:93:e4:f5:fd:63:6f:2f:96:17:90:
3e:d9:1a:e7:4b:77:27:f9:54:cf:dc:67:51:2d:72:69:6b:87:
bf:19:79:bc:a8:55:b8:1d:d8:e3:d9:ac:a5:85:03:88:2b:0a:
e9:96:83:56:22:57:c0:58:71:ec:4b:bc:0c:63:cd:3f:c9:c9:
de:d7:84:ef:85:e9:3a:de:3a:74:5a:c1:b1:62:6b:c5:7a:28:
6e:a2:90:98:02:0b:66:c4:ab:94:f7:3d:96:af:96:4d:3e:80:
7d:ea:57:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:34 2025 by rpki-client